A) Weight changed between first line (3) and last line (0) of log?
That one is correct:
01/12/2004 17:39:05 Q21ff107901f265c0 DSBLMULTI:3 . Total weight = 3.
01/12/2004 17:39:05 Q21ff107901f265c0 NOT bypassing whitelisting of E-mail with weight >=20 (3) and at least 1 recipients (1).
01/12/2004 17:39:05 Q21ff107901f265c0 NOT bypassing whitelisting of E-mail with weight >=15 (3) and at least 4 recipients (1).
The weight is 3 here, but:
01/12/2004 17:39:05 Q21ff107901f265c0 Skipping4 E-mail from [EMAIL PROTECTED]; whitelisted [EMAIL PROTECTED]
The E-mail is whitelisted, so it goes down to 0.
B) Email without the "TEST1:n TEST2:n TESTm:n . Total Weight = nn" line at the beginning but with "weight=0" at bottom:
01/12/2004 17:40:45 Q226a2e6500bc05c4 Tests failed [weight=5]: REVDNS=ALERT WEIGHTHDR=WARN WEIGHTFOOTER=FOOTER
01/12/2004 17:40:55 Q226b2eb1017c0bfd Subject: Paintball Guns and Supplies
01/12/2004 17:40:55 Q226b2eb1017c0bfd From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 63.170.102.99 ID:
01/12/2004 17:40:55 Q226b2eb1017c0bfd Tests failed [weight=0]:
Are you still using LOGLEVEL MID? The "TESTNAME:weight" line should appear at LOGLEVEL MID or higher for every E-mail processed by Declude JunkMail.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
